How to remove KMSAuto.exe

KMSAuto.exe

The module KMSAuto.exe has been detected as Hack.KMS

KMSAuto.exe
Remove KMSAuto.exe

File Details

MD5: 2efa55fedc35ff4d202d940e75b61fce
Size: 6 MB
First Published: 2017-05-27 21:03:23 (6 years ago)
Latest Published: 2024-01-21 23:06:41 (3 months ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2024-01-21 23:06:41 (3 months ago)

Overview

Signed By: WZT
Status: Valid

Common Places:

%appdata%\microsoft\windows activator
%profile%\downloads\kmsauto.lite.portable.1.2.3.sae.rar
%sysdrive%\windows
%appdata%\microsoft
%windir%
%sysdrive%\programlar\işletim sistemi\microsoft office professional plus
%sysdrive%\formak driverlerii\0
%desktop%\kmsautlit123
%sysdrive%\$recycle.bin
%appdata%\microsoft

File Names:

Windows Activator.exe
KMSAuto.exe
$RKRR4GJ.exe

Geography:

10.3%
8.2%
7.4%
4.5%
4.5%
4.1%
4.1%
3.3%
3.3%
3.3%
2.9%
2.9%
2.5%
2.5%
2.1%
2.1%
1.6%
1.6%
1.6%
1.6%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
1.2%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%

OS Version:

Windows 10 83.0%
Windows 7 8.1%
Windows 8.1 7.3%
Windows 8 1.2%
Windows Server 2012 R2 0.4%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 107008 f0a97c86f2496b89b3c0ffa963011515
.text 307200 f1d1dcb82445e9ab9b4b2f73af338172
.rdata 35840 845b07f0ebd235da7031a74ca0534020
.data 6125056 ffc2bfe9c8d13474abd65019ac12d070
.rsrc 45568 92d37d377e3e94190d286603efd8a1de

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSAuto.exe
copyright for information about KMSAuto.exe